🐾 - 🚨 Outgoing connection to an IP address flagged at 🐈‍⬛ Blackcat 🔒 Ransomware C2 - Suricata Rule 3301779 (pawpatrules)

🐾 - 🚨 Outgoing connection to an IP address flagged at 🐈‍⬛ Blackcat 🔒 Ransomware C2

SID: 3301779Rev: 10 views

Sourcepawpatrules

CreatedApril 23, 2022

UpdatedApril 23, 2022

Classificationtrojan-activity

alert ip any any -> 198.144.121.93 any (msg:"🐾 - 🚨 Outgoing connection to an IP address flagged at 🐈‍⬛ Blackcat 🔒 Ransomware C2"; reference:url,https://www.ic3.gov/Media/News/2022/220420.pdf; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.blackcat; metadata:created_at 2022_04_23, updated_at 2022_04_23; sid:3301779; rev:1; classtype:trojan-activity;)

References

url	https://www.ic3.gov/Media/News/2022/220420.pdf
url	https://malpedia.caad.fkie.fraunhofer.de/details/win.blackcat

🐾 - 🚨 Outgoing connection to an IP address flagged at 🐈‍⬛ Blackcat 🔒 Ransomware C2

References

Metadata

Comments (0)